Share via

Azure RBAC For Allowing a User to Create a subscription

Cameron 0 Reputation points
2023-04-10T21:32:04.5633333+00:00

What Role can I grant an AD user in Azure that will allow them to Create Subscriptions? I already know how to grant a user RBAC access to an existing subscription but am at a loss as to how to grant permission to create.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
978 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Harpreet Singh Matharoo 8,401 Reputation points Microsoft Employee Moderator
    2023-04-11T02:36:03.58+00:00

    Hello Cameron Thank you for reaching out. I would like to confirm that Azure RBAC just for control Azure subscription resource access here, it will not work for Azure subscription creation. For creating Azure subscriptions, based on this official doc, only users who have billing roles: Invoice section owner, Invoice section contributor, Azure subscription creator. Only these roles would be able to create Azure subscriptions. Billing roles belongs to your billing account . This doc describes the relationship with billing account with your subscriptions well. I hope this answer helps to resolve your issue. Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.